where did ).exe came from?
I thought you need to use VBscript of some sort to download a file from command line.
How I Cracked a Keylogger and Ended Up in Someone's Inbox
81–90 of 108 posts
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#82Earlier quoted context omitted.
A more sensible solution would be to convert all fixed elements into "position: absolute" ones. That is less prone to cause errors and avoids impeding navigation.
But that doesn't work as well, since for example on this page there is JS event tied to scrolling the page that moves the header with you. So you'd have to tie your own anti-move trigger to the same event, which might mean same script won't be universal. If you just remove the header with a script, you can still get to the navigation by refreshing the page.
I actually just tried in this page and it works perfectly even before any scrolling has happened by just using "position:absolute !important" in the "position:fixed" elements;
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#83Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
These days I'd be worried about CFAA or otherwise getting V& for this. In the "good old days", it was possible to get away with and laugh about this type of vigilante justice. These days though, you're more likely to wind up in prison. No longer worth it for lulz. Sad times now, but good memories.
Honestly, my bigger concern would be motivating a retaliatory attack. A lot of the people who run botnets have big egos and respond poorly to this kind of challenge, especially when it can mean serious lost money for them.
I've caused a retaliatory attack against a system I was responsible for once (thankfully not an important one) and I know at least one other security professional with a similar story - and in his case it was an important network and it stayed down due to retaliatory DDoS for long enough to generate a lot of upset people.
Any kind of active and specific pushback to malicious actors is poking a hornet's nest, and if done on the behalf of an employer, there should be serious discussion and acceptance of the risk of retaliation. Particularly with people running DDoS operations who, in my experience, tend to be a little immature.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#84Earlier quoted context omitted.
I agree, it's amazing how stupid criminals can be, even online. It's scary to think what someone as smart as these security researchers could do if they went black hat...
I'm thinking that's who's working on stuff like Stuxnet, Flame, etc. I wonder what color hat we would consider Government-sponsored malware to be?
National colours
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#85Earlier quoted context omitted.
I agree, it's amazing how stupid criminals can be, even online. It's scary to think what someone as smart as these security researchers could do if they went black hat...
I'm thinking that's who's working on stuff like Stuxnet, Flame, etc. I wonder what color hat we would consider Government-sponsored malware to be?
National colours
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#86Earlier quoted context omitted.
Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.
Technically, my grandmother went to a camp that was west of proper Siberia. (Something about being family of a war hero in what they called the Polish-Bolshevik war.)
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#87a few questions I'm wondering about, if anyone can help: - how do those PW stealers work? are they similar to the Steam one, where it'd delete existing creds and then sniff newly entered ones? - can this thing detect certain apps like FileZilla and then say "user entered " and send individual fields, and is that what is meant by supporting say FTP and FileZilla? - what does PHP support mean? maybe looks for common st…
Steam used to have password crackers out there, not sure about now
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#88Earlier quoted context omitted.
Sure, I used Maltego (commercial version + commercial domaintools access): https://en.wikipedia.org/wiki/Maltego (although Maltego also has a free version). I love domaintools as it allows to find anything by anything. Like domains (current and historical) by email, or even by fragment of registrant information, such as by phone number or by zip code.
For those without domaintools commercial accounts... http://viewdns.info/reversewhois/?q=seemaexports3%40gmail.co...
Thank you
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#89Earlier quoted context omitted.
I’ve had a very similar experience – I’m surprised I’m not the only one who did that. I’d have expected the DDoSers to have better security
Botnets have notoriously bad security. Many of the people running them have no technical knowledge and/or are using "cracked" versions of paid botnet software that are backdoored or intentionally left unsecured. A lot of the software is heavily modified or even left incomplete by the person that leaked it, leading to vulnerabilities open to anybody with some technical competence and the time to poke around a little.
Unrelated to this discussion, I must compliment you on your chosen handle. I used a variation of that back in the day during Half-Life and early Counter-Strike. Zero and everything hehe. Cheers.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#90Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
I wish HN had a `save` feature so I don't lose gems like these.